Privacy policy
PRIVACY POLICY
Last updated: 27 August 2026
This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit the Texpandr online store (the “Store”), place an order, register interest in overseas shipping, or email us for support.
It is written for Singapore’s Personal Data Protection Act 2012 (the “PDPA”). If there is a conflict between our Terms of Service and this Privacy Policy about personal data, this Privacy Policy prevails.
The Texpandr software on the USB thumbdrive is designed to work offline. Shortcuts and phrases you save on the device are not uploaded to us. This Policy covers the Store, checkout, and support — not the phrases file on your thumbdrive.
1. Who we are
1.1 The Store is operated by TEXPANDR (UEN 53530877M), 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051 (“Texpandr”, “we”, “us”, “our”).
1.2 Our Data Protection Officer (or data-protection contact) is reachable at texpandr.support@gmail.com. Use the same address for access, correction, consent withdrawal, and privacy questions.
2. Personal data we collect
2.1 We collect personal data that identifies you or can reasonably be linked to you. Depending on how you use the Store, this may include:
(a) Order and checkout: name, email address, Singapore delivery address, phone number if you give one, order contents, and payment confirmation (including status, amount, and method). We do not receive your full card number. Payment card details are processed by Shopify and the payment provider you choose at checkout.
(b) Overseas shipping interest: email address and country, if you submit the interest form so we can tell you when international shipping opens.
(c) Support: information you include in emails or other messages to texpandr.support@gmail.com (for example your order number and a description of a defect).
(d) Store and device data: IP address, browser and device type, pages viewed, and similar technical data that Shopify collects so the Store, cart, and checkout can function.
2.2 We do not require you to create a Texpandr account. If Shopify offers a customer account and you choose to create one, Shopify will hold the login details for that account.
2.3 We do not collect NRIC or other national ID numbers. Please do not send them to us.
3. How we collect personal data
3.1 Directly from you: when you check out, submit the overseas-interest form, or email support.
3.2 Automatically: through the Store and Shopify’s hosting, cookies, and similar technologies needed for the site, cart, and checkout to work.
3.3 From service providers acting for us: Shopify, payment providers, and the courier, when they process an order or delivery.
4. How we use personal data
4.1 We use personal data only for these purposes, or purposes that a reasonable person would consider appropriate in the circumstances:
(a) to accept, refuse, fulfil, ship, and support your order, and to process cancellations, returns, and refunds;
(b) to take payment through Shopify and the payment provider, and to detect or prevent fraud or misuse of the Store;
(c) to reply to support, defect, and returns emails;
(d) if you submitted the overseas-interest form: to email you when international shipping opens (and not for other marketing unless you later agree);
(e) to keep accounting, tax, and legal records, and to comply with Singapore law or a valid legal request;
(f) to operate, secure, and fix the Store (including using technical logs).
4.2 We do not sell personal data. We do not send promotional SMS or postal marketing. We do not use your data for cross-site targeted advertising unless we say so in an updated Policy and, where required, obtain consent.
4.3 Checkout and delivery data is used because it is needed to perform the contract (deemed consent by contractual necessity under the PDPA, and/or consent you give at checkout). Overseas-interest emails are sent because you asked us to notify you.
5. Who we disclose personal data to
5.1 We disclose personal data only as needed for the purposes above:
(a) Shopify Inc. and its group, which host the Store, checkout, and (if you use them) customer accounts. See Shopify’s consumer privacy information at https://privacy.shopify.com/en ;
(b) the payment provider enabled at checkout (for example Shopify Payments and its card processors);
(c) the courier or logistics partner that delivers your order in Singapore;
(d) our email provider, so we can send order-related and support messages from texpandr.support@gmail.com ;
(e) professional advisers, insurers, or authorities where the law requires or allows it (including to establish, exercise, or defend legal rights);
(f) a buyer or successor if we transfer the Store as a business, on the basis that they protect the data to a comparable standard.
5.2 These parties may only use the data to provide their service to us, or as they describe in their own notices where they are independent organisations (Shopify, in particular, also processes some Store data to provide and secure its platform).
6. Transfers outside Singapore
6.1 The Store runs on Shopify. Personal data of Singapore customers is transferred to, stored by, and processed by Shopify and its subprocessors outside Singapore, including in Canada, the United States, and other countries where Shopify operates.
6.2 Payment providers and email hosting may also process data outside Singapore.
6.3 We take steps so that personal data transferred out of Singapore is protected to a standard comparable to the PDPA, including relying on Shopify’s and our other providers’ contractual and organisational safeguards.
7. Cookies and similar technologies
7.1 Shopify uses cookies and similar technologies so you can browse the Store, keep a cart, complete checkout, and keep the site secure.
7.2 If we later enable optional Shopify analytics, pixels, or advertising, we will update this Policy and use Shopify’s customer-privacy / cookie tools as required. Until then, we do not use your Store activity to show you targeted ads on other websites.
8. Retention
8.1 We keep personal data only as long as needed for the purposes in this Policy, including legal and accounting duties.
8.2 As a guide:
(a) order, payment-confirmation, and delivery records: at least 5 years after the transaction (IRAS and similar record-keeping);
(b) overseas-interest emails: until you unsubscribe, ask us to delete the request, or we cancel overseas-shipping plans;
(c) support emails: for as long as needed to resolve the query and for a reasonable period afterwards if they form part of an order or defect record;
(d) technical logs: for a short operational period unless they are needed for security or a dispute.
8.3 When we no longer need personal data, we will delete or anonymise it, or securely hold it if immediate deletion is not reasonably possible.
9. Your rights (PDPA)
9.1 Subject to the PDPA, you may:
(a) ask us for access to the personal data we hold about you;
(b) ask us to correct personal data that is inaccurate;
(c) withdraw consent for uses that rely on consent (for example, overseas-interest emails). Withdrawal does not affect uses already completed, or uses we must continue for legal or contractual reasons (for example, a completed order);
(d) ask us to stop using or to delete personal data where we no longer have a legal or contractual need to keep it. We may refuse deletion of order records we must retain for tax or legal purposes.
9.2 To exercise these rights, email texpandr.support@gmail.com. We may need to verify that the request comes from you. We will respond as soon as reasonably possible, and in any case within 30 days, unless a longer period is permitted by law.
9.3 You can unsubscribe from overseas-interest and other promotional emails using the unsubscribe link in the email, or by writing to the same address. We may still send non-promotional messages about an order you have placed.
10. Children
10.1 The Store is for persons aged 18 and over, as in our Terms of Service. We do not knowingly collect personal data from children.
10.2 If you believe we have collected personal data from a person under 18, email texpandr.support@gmail.com and we will delete it unless we are required to keep it.
11. Security
11.1 We use reasonable security arrangements to protect personal data, including relying on Shopify’s checkout and hosting controls, and limiting access to order and support information.
11.2 No method of transmission or storage is perfectly secure. Do not send full payment card numbers or passwords to our support email.
12. Complaints
12.1 If you have a concern about our handling of personal data, email texpandr.support@gmail.com first and we will look into it.
12.2 You may also lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore: https://www.pdpc.gov.sg
13. Changes
13.1 We may update this Privacy Policy to reflect our practices or the law. The updated version will be posted on the Store with a new “Last updated” date.
13.2 For a material change (for example a new marketing use or a new overseas processor), we will give additional notice where the PDPA requires it, and we will not use existing personal data for a new purpose that requires consent until that consent is obtained.
14. Contact
Privacy questions, DPO contact, access, correction, and consent withdrawal:
texpandr.support@gmail.com
Postal address:
TEXPANDR (UEN 53530877M)
60 Paya Lebar Road
#06-28 Paya Lebar Square
Singapore 409051